Including threat actor capability and motivation in risk assessment for Smart GRIDs

The SEGRID (Security for Smart Electricity GRIDs) collaboration project, funded by the EU under the FP7 program investigates risk assessment methodologies and their possible need for enhancement. In this paper we discuss the need to include threat actor analysis in threat, vulnerability and risk assessments for smart grids based on the first findings of the practical application of the SEGRID approach to risk assessment. We motivate and propose an approach for including the threat actor's capability and motivation in such a threat, vulnerability and risk assessment.